WHAT IS CLAIMED IS: 
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1 . An arrangement for handling an exchange of information between an 
information requesting side and an information providing side, the information 
requesting side comprising an information requesting application and the 
information providing side comprising an information providing application, wherein 
between said information requesting and information providing applications an 
agreement is created specifying what information is exchangeable therebetween, 
said agreement being represented by a form, the form being filled in by, and 
communicated between, the requesting and providing applications in both directions, 
being related to requesting data and/or providing data, and being implemented and 
communicated using a generic mark up language. 

2. The arrangement according to claim 1 , wherein the generic mark up 
language is XML. 

3. The arrangement according to claim 1 , wherein the form comprises an 
XML tree tagged with information about data to be "set", retrieved, or data that is 
provided. 

4. The arrangement according to claim 1 , wherein the form comprises an 
XML tree with queries in the form of attributes and element data to be given values. 

5. The arrangement according to claim 4, wherein the attributes comprise 
one or more of "from", "get", "null", "error", and "set". 

6. The arrangement according to claim 2, wherein the XML form is 
implemented and sent as an XML string. 

7. The arrangement according to claim 3, wherein the tagged XML form 
is implemented as an XML DOM node object, and transforming/parsing means are 
provided in the applications for transforming XML objects to XML strings, using an 
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XSL transformation style sheet (XSLT), and for parsing the XML strings to the XML 
DOM object respectively. 

8. The arrangement according to claim 1 , wherein server means are 
5 associated with the requesting and providing applications respectively. 

9. The arrangement according to claim 8, wherein the providing 

application comprises means for converting a received XML form to a database call i 
of SQL format, and the requested information is entered/filled in on the form on the 
10^ providing side for retransmittal to the requesting application. 

10. The arrangement according to claim 2, wherein the XML form is 

UJ independent of the structural implementation of any information holding/providing 
=j database or similar. 

Py 11. The arrangement according to claim 10, wherein for the agreement a 

n basic or general DTD is given, which is used when building a basic XML form to be 
filled in. 

20 12. The arrangement according to claim 1 1 , wherein validating means are 

provided for validation of a request. 

. 13. The arrangement according to claim 12, wherein the validating means 
comprises end user controlled, user unique DTDs stored in information holding 
25 means, and a filled in XML form from a requesting application is validated against 
the appropriate end user unique DTD to establish whether the request is allowed or 
not. 
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14. The arrangement according to claim 13, wherein with the requesting 
and providing applications respective access means, plug-in server means are 
provided, which in communication with central protection server means form a 
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personal protection profile network, said central server means comprising or 
communicating with personal protection profile holding means. 

15. The arrangement according to claim 14, wherein the personal 
protection profile holding means holds end user unique personal protection profiles 
specifying which data within personal profiles are accessible to which applications, 
and said personal protection profiles comprise user unique DTDs that are end user 
controlled. 

16. The arrangement according to claim 15, wherein an application and its 
associated access means communicate by means of XML objects in XML transport 
objects using RMI or CORBA. 

17. The arrangement according to claim 16, wherein the access means 
associated with a requesting application finds a user unique DTD in the central 
server means using information about the basic general agreement provided from 
the requesting application, and in that the user unique DTD is validated against a 
request represented by a filled in XML form, to establish if a current request is 
allowed or not. 

18. A data communication system providing communication between a 
number of applications comprising and/or communicating with 
service/information/content providers or holding means that hold end user personal 
profile data, wherein between each intercommunicating pair of applications an 
agreement is created to define what information is allowed to be transferred 
between the applications, bidirectionally or unidirectionally, information about 
agreements is stored in agreement information holding means, said agreements are 
represented as forms to be filled in and transferred between an information 
requesting application and an information providing application, and a generic mark 
up language is used for implementation and communication of said forms. 
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19. The data communication system according to claim 18, the generic 
mark up language is XML. 

20. The system according to claim 19, wherein the forms comprise XML 
trees tagged with information about data to the "set" or "get" by the requesting 
application or with data to be provided. 

21. The system according to claim 18, wherein agreements are held by the 
respective applications between which an agreement has been established or by 
means associated therewith, and in that said agreements comprise DTDs. 

22. The system according to claim 18, wherein the system comprises a 
personal profile protection network, comprising access means associated with each 
respective application and central protection server means, comprising or 
communicating with information holding means, whereby said information holding 
means comprise said agreement holding means. 

23. The system at least according to claim 19, wherein attributes and 
elements are used in the XML tree form, which attributes and elements are given the 
appropriate values/data, which constitutes filling in the form. 

24. The system according to claim 19, wherein the XML form is 
implemented as an XML DOM node tree object, and communicated between 
applications as an XML string, transforming/parsing means being provided in the 
applications for transforming the XML DOM node tree object to an XML string for 
parsing the XML string to the XML DOM node tree object. 

25. The system according to claim 22, wherein validating means 
comprising end user controlled, user unique DTDs or personal protection profiles 
stored in the information holding means, an XML form from a requesting application 
being validated against the appropriate user unique DTL to establish whether the 
request is allowed or not. 
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26. A method for exchanging information between an information requesting 
application and an information providing application having established an 
agreement to specify which information is allowed to be transferred between the 
information requesting and information providing applications, the method 
comprising the steps of: 

creating, using a generic mark up language, a form with elements and 
attributes wherein the attributes are used to indicate element(s) to be filled with data, 
according to the agreement; 

transferring the filled in form tagged with information relating to requested 
data from the requesting application to the providing application; 

receiving the form at the receiving application; 

converting the request form to a database call; 

accessing information holding means using a database call; and 

if the request relates to retrieving data, 

filling in the form using data retrieved from an information holding site; 
returning the requested information to the requesting application, otherwise; 
setting data according to the tagged form in the information holding means 
according to the request. 

27. The method according to claim 26, wherein the generic mark up 
language is XML, and in that the form comprises an XML tree in DOM object form or 
in string form with attributes used to indicate elements to be filled with data 
according to established agreements. 

28. The method according to claim 27, wherein the agreement comprises 
a DTD. 



29. The method according to claim 27, further comprising the step of: 
communicating the XML form tagged with information as an XML string. 
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30. The method according to claim 27, further comprising the step of, if the 
XML form Is implemented as an XML object, converting the XML object to an XML 
string in the requesting/providing applications respectively for 

transportation between the applications. 

31 . The method according to claim 29, further comprising the step of: 
validating the XML tree against a user unique DTD stored in personal 

protection profile holding means; and 

providing information as allowed according to the outcome of the validation. 



